This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft File: YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json) Hash identifier: SLCy338iNDxiwpiyzcHZbniJ/14lUVtHrR2v00k302A= Subject key identifier: C6:E5:63:A7:04:A1:97:E6:0D:48:8A:75:FB:39:6D:3C:19:DD:D1:51 Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c Certificate serial: 019B4882A315B9728CD425B334779959829C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 00:01:19 +0000 Manifest this update: Tue 23 Dec 2025 00:01:19 +0000 Manifest next update: Wed 24 Dec 2025 00:01:19 +0000 Files and hashes: 1: 6ZqvxOIku_49tBv2G-O9_p-5hVM.roa (hash: TYPoYRQa9KHLM0V6FPsrIT1zwnhyRnA4uELbenS3VGM=) 2: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: eh37+SeyCyGyIrpa6ah7nUwZ4OX3Ufy8s2jGBhv9Ru4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:a3:15:b9:72:8c:d4:25:b3:34:77:99:59:82:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c Validity Not Before: Dec 23 00:01:19 2025 GMT Not After : Dec 24 00:01:19 2025 GMT Subject: CN=c6e563a704a197e60d488a75fb396d3c19ddd151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b6:42:a5:c5:43:17:f8:7f:58:7d:00:f0:d5: 2e:d7:66:c6:a3:bd:45:64:8f:58:c2:52:e1:a7:86: e4:a5:c8:aa:21:79:27:0b:f8:0c:9c:77:a7:a5:2a: 57:91:fc:5f:8f:3e:3b:7c:1d:dc:a9:86:bc:80:6d: 20:86:55:ea:a9:5f:52:3a:19:cc:52:52:42:3d:82: 37:4b:3f:76:c5:0c:3d:99:a7:f6:1b:05:b3:26:bb: b7:c8:5e:63:0e:a1:92:3d:fb:30:2f:b6:05:71:a9: 99:cf:25:1b:9a:16:3c:ca:34:4f:7d:f0:3f:3e:d5: 9b:8d:d9:65:24:f7:79:9f:35:07:2f:60:7c:01:df: fc:a1:71:5b:1a:17:de:4e:b3:63:26:68:69:8b:60: c4:e2:49:83:3c:a2:70:eb:47:3e:5d:84:62:44:97: 2d:bc:63:45:11:96:b9:86:18:48:3f:b8:3c:d8:d6: e2:8e:e1:95:52:5b:c2:45:cd:d7:19:a7:71:cf:79: f3:3a:82:89:51:f3:3f:6e:aa:a7:21:29:f7:ae:b3: 3d:2f:fe:6e:15:95:b7:9b:78:ea:43:94:2c:29:69: 53:82:26:05:e0:ec:d3:2e:c4:82:8e:0a:17:f9:e8: 4e:28:11:24:f1:7e:d7:05:5b:0d:4b:a8:15:3b:eb: 91:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E5:63:A7:04:A1:97:E6:0D:48:8A:75:FB:39:6D:3C:19:DD:D1:51 X509v3 Authority Key Identifier: keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e1:18:ef:19:9b:5e:12:1c:74:dd:66:55:51:8e:d2:cf:c6: eb:de:05:ee:93:6c:4a:4b:2a:86:b3:b2:24:39:c1:e9:13:a6: e1:c6:53:74:e0:33:2d:ee:d9:65:bf:5f:0d:d1:2a:a7:42:0a: f2:3d:0d:7d:86:70:97:93:74:99:ee:df:3e:12:b8:fc:f8:96: 81:01:e9:fe:77:98:2e:b5:db:e7:6d:a1:c8:19:7a:49:7b:35: 29:d4:9d:86:69:9c:96:27:7a:14:b0:3f:1a:a5:b8:f3:41:3a: 46:5b:02:82:01:d0:c6:11:2b:18:76:b2:c5:8e:76:73:a1:04: a0:3c:12:f9:14:41:b9:be:6b:84:01:e1:79:72:3b:c3:59:24: 55:44:6b:f8:c1:47:8c:ed:46:e5:14:e2:f9:36:9f:c9:c0:5e: a6:12:5b:85:2b:80:94:9f:79:63:9a:54:19:9e:75:8c:de:22: 1a:db:5a:c5:f3:42:89:10:d2:8c:4d:05:88:4c:ea:41:20:96: 5b:ab:18:74:79:d9:a2:1f:e3:27:df:f3:19:79:1f:29:c1:54: d9:8d:9b:38:6b:03:fc:36:da:06:a6:88:91:d4:da:f9:c1:4a: ee:9f:01:02:5b:26:7e:21:d9:74:ee:46:3a:86:ce:72:05:2a: cd:82:62:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgqMVuXKM1CWzNHeZWYKcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMDIxM2FiYTFlYTkyOGI5ZWQzMjQ5MWRlOWJhMTA0NjRi MDYzNmMwHhcNMjUxMjIzMDAwMTE5WhcNMjUxMjI0MDAwMTE5WjAzMTEwLwYDVQQD EyhjNmU1NjNhNzA0YTE5N2U2MGQ0ODhhNzVmYjM5NmQzYzE5ZGRkMTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrZCpcVDF/h/WH0A8NUu12bGo71F ZI9YwlLhp4bkpciqIXknC/gMnHenpSpXkfxfjz47fB3cqYa8gG0ghlXqqV9SOhnM UlJCPYI3Sz92xQw9maf2GwWzJru3yF5jDqGSPfswL7YFcamZzyUbmhY8yjRPffA/ PtWbjdllJPd5nzUHL2B8Ad/8oXFbGhfeTrNjJmhpi2DE4kmDPKJw60c+XYRiRJct vGNFEZa5hhhIP7g82NbijuGVUlvCRc3XGadxz3nzOoKJUfM/bqqnISn3rrM9L/5u FZW3m3jqQ5QsKWlTgiYF4OzTLsSCjgoX+ehOKBEk8X7XBVsNS6gVO+uRGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMblY6cEoZfmDUiKdfs5bTwZ3dFRMB8GA1UdIwQY MBaAFGMCE6uh6pKLntMkkd6boQRksGNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hY2NjNzYtZTEyMy00NWIxLTk2YjQt OGY0YzU5ZWMyMGJlLzEvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9hY2NjNzYtZTEyMy00NWIxLTk2YjQtOGY0YzU5ZWMyMGJl LzEvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOEY7xmb XhIcdN1mVVGO0s/G694F7pNsSksqhrOyJDnB6ROm4cZTdOAzLe7ZZb9fDdEqp0IK 8j0NfYZwl5N0me7fPhK4/PiWgQHp/neYLrXb522hyBl6SXs1KdSdhmmclid6FLA/ GqW480E6RlsCggHQxhErGHayxY52c6EEoDwS+RRBub5rhAHheXI7w1kkVURr+MFH jO1G5RTi+TafycBephJbhSuAlJ95Y5pUGZ51jN4iGttaxfNCiRDSjE0FiEzqQSCW W6sYdHnZoh/jJ9/zGXkfKcFU2Y2bOGsD/DbaBqaIkdTa+cFK7p8BAlsmfiHZdO5G OobOcgUqzYJiWA== -----END CERTIFICATE-----Generated at Tue Dec 23 07:54:34 2025 by rpki-client